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• Federal jurors found a St. Louis-area lawyer and religious leader guilty of bilking hundreds 
of investors out of more than $50 million in a real estate Ponzi scheme. - Associated Press 
(See item 15 ) 

• Seven years after hundreds of people died in nursing homes in New Orleans during 
ffurricane Katrina, nursing homes are still woefully unprepared to protect frail residents in 
a natural disaster, a new government report found. - Associated Press (See item 37 ) 

• Two police officers were injured in New York City April 14 when police clashed with 
anarchists at a local Starbucks in a wild, hours-long spree. - DNAinfo.com (See item 57 ) 

• The massive storm system that moved through Kansas the weekend of April 14 severely 
affected many businesses. Most impacted were hospitals, major airplane manufacturers, 
schools, and a military base. - Associated Press (See items 58 , 10 , 46 , 47 ) 
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Energy Sector 



Current Electricity Sector Threat Alert Levels: Physical: LOW, Cyber: LOW 

Scale: LOW, GUARDED, ELEVATED, HIGH, SEVERE [Source: ISAC for the Electricity Sector (ES-ISAC) - 
rhttp://www.esisac.coml 



1. April 16, Union City Patch - (California) Underground electrical explosion leaves 
6,000 without power. An underground electrical explosion left 6,000 residents without 
power April 15 in Union City, California, according to the Union City Police 
Department. The incident occurred when a 600-amp three-way switch exploded and 
caused a fire underground in the area of Alvarado-Niles and Hop Ranch roads. The fire 
was contained under four large metal plates bolted to the sidewalk and did not reach the 
surface. Officers found smoke coming from several metal plates on the sidewalk and 
notified Pacific Gas and Electric (PG&E). Police said there was no damage to the 
sidewalk or road. PG&E estimated that 6,000 residents lost power due to the explosion, 
but all service had been restored within 7 hours. 

Source: http://unioncitv.patch.com/articles/underground-electrical-explosion-leaves-6- 
000-without-power 

2. April 15, Associated Press - (Michigan) Fuel tanker aground off Michigan 

coast. The U.S. Coast Guard said its personnel were monitoring a ship carrying 49,000 
gallons of diesel fuel that ran aground in Lake Michigan near shore off Manistee, 
Michigan. The Coast Guard said there were 17 people aboard the Invincible when it 
became grounded April 14, about 120 miles north of Grand Rapids. A petty officer said 
the ship was not in danger of tipping over and there was no indication of leakage. The 
agency said tugs were towing the ship to Sturgeon Bay, Wisconsin. 

Source: http://gazettextra.com/weblogs/latest-news/2012/apr/15/fuel-tanker-aground- 
michigan-coast/ 

3. April 15, Associated Press - (Kansas) Kansas storms knock out power to 26,500 
homes, by Sunday 7,300 still without power. Utility companies were working to 
restore power to thousands of customers after heavy storms and tornadoes hit Kansas 
the weekend of April 14. Westar Energy said April 15 that power was expected to be 
fully restored by April 17. The utility company said heavy sightseeing traffic in hard- 
hit areas of Wichita has slowed down repairs. The storms and tornadoes hit the Wichita 
area April 14. Westar said up to 26,500 customers lost power, but by April 15 that 
number had been reduced to about 7,300 customers in Sedgwick County, and 140 in 
Butler County. The storms knocked down more than 110 power poles and broke nearly 
200 power lines, and also damaged substations. 

Source: 

http://www.therepublic.com/view/story/249ddec84eef4562b32b522d55a62033/KS— 
Severe-Weather- Kansas-Outages/ 

For another story, see item 63 
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Chemical Industry Sector 



4. April 16, Charleston Gazette - (West Virginia; Ohio) C8 linked to kidney, testicular 
cancer. A three -person team of experts announced April 16 it has found a “probable 
link” between exposure to the chemical C8 and the development of kidney and 
testicular cancer in humans. Members of the C8 Science Panel made those conclusions 
in the second set of significant findings in their 6-year study of the DuPont Co. 
chemical plant near Parkersburg, West Virginia. Panel members cited previous studies 
of DuPont workers, as well as the results of their own still-to-be-published analysis of 
health data for thousands of Mid-Ohio Valley residents. The findings mean DuPont Co. 
will have to fund future medical tests for area residents, to help provide early detection 
of diseases linked to exposure to C8 from its Washington Works plant. Science panel 
members also said they found no probable link between C8 exposure and other cancers, 
saying they focused specifically on possible connections with disease of the pancreas, 
liver, prostrate and breast. Panel members also said they found no link between C8 and 
adult-onset diabetes. The work of this panel is part of the 2005 settlement of a lawsuit 
filed against DuPont by residents whose drinking water was contaminated. C8 is 
another name for perfluorooctanoate acid, or PFOA. 

Source: http://wvgazette.com/News/201204160Q35 

5. April 16, CF Industries - (Oklahoma) CF Industries announces power outage at 
Woodward, Oklahoma, nitrogen complex. CF Industries announced that its 
Woodward, Oklahoma, nitrogen complex lost its power supply due to tornadoes that 
passed through the area early April 15, and is temporarily out of service. No direct 
damage was reported at the complex. Company officials said several employees 
experienced damage to their homes. They said they plan to make a contribution to the 
American Red Cross to help fund recovery efforts in the Woodward community. CF 
Industries manufactures and distributes nitrogen and phosphate products, serving 
agricultural and industrial customers. 

Source: http://www.marketwatch.com/storv/cf-industries-announces-power-outage-at- 
woodward-oklahoma-nitrogen-complex-20 1 2-04- 1 6 

6. April 14, Peoria Journal Star - (Illinois) Three sent to hospital after chemical plant 
fire. A fire April 13 at a chemical manufacturer in Mapleton, Illinois, sent three 
firefighters to the hospital with non life-threatening injuries. The Timber Hollis fire 
chief said firefighters responded in the evening to reports of a medium-sized fire at 
Lonza Inc. He said fire crews got the fire under control within about 30 minutes with 
the help of fire brigade personnel from Lonza’ s emergency response team. Two 
firefighters from Timber Hollis and one member of Lonza’ s team were transported by 
ambulance to a hospital. A damage estimate was not available, and the cause of the fire 
is still under investigation. 

Source: http://www.pistar.com/news/xl830133388/Three-sent-to-hospital- after- 
chemical-plant-fire 

7. April 14, Associated Press - (Utah) Cleanup of chemical spill could take 2-4 
weeks. Officials said it could take 2 to 4 weeks to clean up a hazardous material spill 
along a highway in Daggett County, Utah, the Associated Press reported April 14. The 
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Utah Highway Patrol (UHP) said the spill occurred April 12 on state Route 44 near 
Manila when a tractor-trailer hauling 12 large containers of chlorite solution tipped 
over and rolled down a ravine. A UHP lieutenant said up to 3,600 gallons of the 
material spilled from the containers. He said an unknown amount of the chlorite 
solution leaked into a stream that feeds into Flaming Gorge Reservoir, and it could 
affect fish there. Crews will remove soil that became saturated with the material. 

Source: http://www.abc4.com/content/news/state/storv/Cleanup-of-chemical-spill- 
could-take-2-4-weeks/CwdsN4vFtUi-TO E5UFMGg.cspx 

8. April 13, United Press International - (National) EPA mulls new toxic report 

requirements. April 13, the U.S. Environmental Protection Agency (EPA) proposed a 
rule requiring electronic reporting of information to the agency under the Toxic 
Substances Control Act. Such a requirement would aid the agency in its effort to 
increase transparency and public access to chemical information, the EPA said in a 
news release. If the rule is finalized, the EPA said, it will only accept data, reports, and 
other information submitted through EPA’s Central Data Exchange, a centralized portal 
that enables streamlined, electronic submission of data via the Internet. The agency said 
it would be soliciting comments on the proposed rule for 60 days. 

Source: http://www.upi.com/Science News/2012/04/13/EPA-mulls-new-toxic-report- 
requirements/UPI-66641 334358 1 81/ 

For more stories, see items 24, 29, 33, and 34 
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Nuclear Reactors, Materials and Waste Sector 

9. April 16, Global Security Newswire - (International) Illicit strontium 90 deal busted 
in Armenia. Two Armenian citizens were detained following an attempted sale of 
radioactive strontium 90 in their home nation, Agence France-Presse (AFP) reported 
April 15. “Two residents of Yerevan [...] were arrested while trying to sell a radioactive 
substance, strontium 90,” the Armenian National Security Service said in a statement. It 
did not provide specifics on how much material was involved or to whom the suspects 
allegedly intended to sell the strontium. In 201 1, Armenia detained four nationals on 
suspicion of trying to sell strontium 90, AFP reported. Strontium 90 is considered a 
potential ingredient for producing a “dirty bomb,” which would use conventional 
explosives to disperse radioactive material. It is among the highly radioactive materials 
that “require particular attention for safety and security reasons,” according to the 
International Atomic Energy Agency. 

Source: http://www.nti.org/gsn/article/illicit-strontium-deal-busted-armeniatw/ 

For another story, see item 11 
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Critical Manufacturing Sector 



10. April 16, Wichita Eagle - (Kansas) Spirit AeroSystems, Boeing close temporarily to 
assess tornado damages. Aircraft manufacturing facilities operated by Spirit 
AeroSystems and Boeing in Wichita, Kansas, were closed for at least a day by damage 
from storms April 15, a disruption that could slow one of the country’s biggest jet 
programs. All operations were suspended at Spirit AeroSystems and neighboring 
Boeing while the two companies assessed significant storm damage. Spirit will be 
closed at least through April 17, and a spokeswoman asked employees not to come to 
work unless contacted. The work disruption at Spirit could have an impact on Boeing’s 
737 program if Spirit’s fuselage construction for the plane is interrupted, according to 
an aviation analyst. Boeing and Hawker Beechcraft facilities on Wichita’s east side 
sustained lesser damage. Boeing suspended operations through April 16 due to a power 
outage in the area. Hawker Beechcraft’ s Plant IV manufacturing facility sustained 
“limited and isolated damage” to its roof, a company spokeswoman said. 

Source: http://www.kansas.com/2012/04/15/2298117/spirit-aerosystems-boeing- 
clo se . html#storylink=cp y 

For more stories, see items 34 and 58 
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Defense Industrial Base Sector 



1 1 . April 14, Defense News - (National) Nuke expert pool shrinking. Within the next half 
decade, the U.S. government expects to have lost to retirement all scientists who did 
hands-on work in the blueprinting and trial explosions of nuclear weapons, Defense 
News reported April 14. The small cadre of remaining personnel with that experience 
encompasses anyone who “had a key hand in the design of a warhead that’s in the 
existing stockpile and who was responsible for that particular design when it was tested 
back in the early 1990s,” the head of the U.S. National Nuclear Security Administration 
said in March. That loss of expertise is a significant issue for some observers who 
worry about the state of the nation’s nuclear deterrent. Others say it should be expected 
given the nation’s longstanding voluntary moratorium on nuclear-weapon trial 
explosions. It has been two decades since the United States last set off an underground 
blast. Some believe the United States should reserve the right to test its nuclear 
weapons not only to keep unique scientific and engineering skills alive, but also 
because the weapons may require it. However, a new report from the National 
Academy of Sciences says the country is able to maintain a safe and effective nuclear 
weapons stockpile without testing. Sustaining a high quality workforce remains one of 
the most important aspects of maintaining a safe, effective nuclear deterrent, the report 
says. Much of the scientific work being done on the weapons is called “surveillance,” 
performing routine checkups on the weapons to make sure the components are still safe 
and functioning. Advocates of testing say surveillance is not reassurance enough that 
the warheads, which experience natural degradation over time, are still working. 

Source: http://www.defensenews.com/article/20 1 204 1 4/DEFREG02/304 1 40002 
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12. April 13, Aviation Week - (National) Boeing Wichita closure adds risk to KC-46A. A 
senior U.S. Air Force (USAF) official said Boeing’s decision to close its facility in 
Wichita, Kansas, by the end of 2013 may add risk to its ability to execute the KC-46A 
aerial refueling contract, Aviation Week reported April 13. The Wichita facility was 
“well-suited” for militarizing the 767-2C aircraft, including adding the refueling 
equipment, owing to decades of experience, said the USAF’s KC-46A program 
executive officer. Now, however, that work is being set up between Boeing’s Puget 
Sound and Everett facilities, both in Washington. This move, announced nearly a year 
after the company won the contract over an EADS A330-based tanker entry, will 
introduce risk in three key areas, the program’s executive officer said. They include the 
transfer of refueling boom assembly work, shifting oversight of the Federal Aviation 
Administration supplemental type certification (STC), and moving the military 
modification and finishing center. The government asked for details on how Boeing 
plans to ensure the STC will be addressed, the executive officer said. Also, “Boeing 
owes us [a] more detailed report on the Wichita move [and] progressively more details 
on their plans for integrating the boom and other aspects of the schedule,” according to 
the Secretary of the Air Force. Boeing opted to close the Wichita facility by the end of 
2013 due to a lack of “sustainable business on the horizon,” company officials said. 
Source: 

http ://w w w . aviationweek.com/aw/generic/story channel. j sp?channel=defense&id=new 
s/awst/20 12/04/09/AW 04 09 2012 p29-444556.xml 

For more stories, see items B) and 58 
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Banking and Finance Sector 

13. April 15, Naples Daily News - (Florida) FDIC seeks $62 million from operators of 
failed Florida Community Bank. The former directors of Florida Community Bank 
(FCB), including its chief executive officer (CEO) and longtime president, face a 
multimillion-dollar lawsuit brought by the Federal Deposit Insurance Corp. (FDIC), 
accusing them of being “grossly negligent” and “reckless” in operating the local bank. 
The FDIC, which became the receiver for the Collier County, Florida-based bank after 
it failed in January 2010, seeks damages of more than $62 million based primarily on 
losses from eight loans, which it says violated the bank’s own lending rules. One of 
those was a personal loan to the ex-CEO of the failed Orion Bank in Naples, Florida, 
who has pleaded guilty to bank fraud. The other problem loans were risky commercial 
real estate loans, mostly made to borrowers property acquisition and development. In 
its lawsuit, the FDIC alleges the bank’s former directors “created an environment in 
which unsafe and unsound lending practices abounded.” By the end of 2006, FCB had 
an “extreme concentration” of acquisition and development loans “quadruple that of the 
average bank in its peer group,” the lawsuit said. The loans were risky because they 
were to developers, builders, and speculators who often have several projects and 
whose incomes are tied to changing real estate values. “Each of the defendants caused 
or permitted loans to be made to borrowers who were known to be or should have been 
known to be not creditworthy, or who had demonstrated a lack of ability to repay,” the 
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lawsuit states. 

Source: http://www.naplesnews.com/news/2012/apr/15/fdic-florida-community-bank- 
jerry- williams-price/ 

14. April 15, K1MT 3 Mason City - (Iowa) Fire destroys Titonka Savings Bank 
office. An April 15 fire destroyed the Titonka Savings Bank office in Titonka, Iowa. 
Although the building has been reduced to rubble, the vault and safety deposit boxes 
remain unharmed. The cause of the fire is not yet known. No injuries were reported, but 
a nearby neighborhood was evacuated. The Titonka Fire Department had help from 
other area fire crews. 

Source: http://www.kimt.com/content/localnews/storv/Fire-Destroys-Titonka-Savings- 
B ank- Qffice/TFiqlz JkykQPFehlNEzz- w . c spx 

15. April 13, Associated Press - (Missouri; International) Missouri lawyer convicted in 
Ponzi scheme. Federal jurors found a St. Louis-area lawyer and religious leader guilty 
April 13 of bilking investors out of more than $50 million in a real estate scheme. 
Prosecutors alleged the man was the “life source” behind the largest Ponzi scheme the 
eastern district of Missouri has seen. The St. Louis Post-Dispatch reported the fraud, 
conspiracy, and money laundering convictions against the man capped a 4- week trial in 
which prosecutors detailed how more than 150 investors were recruited with promises 
of rich returns through land investments in England. Prosecutors said the money never 
made it overseas and that more than 30 percent went toward fees. They said the lawyer 
used the money to fund a lavish lifestyle. Two partners testified against the man as part 
of plea deals. An assistant U.S. attorney said the three conspired to create the classic 
Ponzi scheme, where money from new investors was used to pay off old investors over 
10 years ending in 2010. 

Source: http://www.kansascity.com/2012/04/13/3553173/missouri-lawyer-convicted- 
in-ponzi.html 

16. April 13, Gov Info Security - (National) GAO: SEC’s financial information at 
risk. Government auditors have identified weaknesses in information security controls 
at the U.S. Securities and Exchange Commission (SEC) that jeopardize the 
confidentiality and integrity of the SEC’s financial information, Gov Info Security 
reported April 13. Government Accountability Office (GAO) auditors uncovered four 
significant deficiencies in the GAO’s review of 2010 and 2011 commission financial 
statements, including those involving information systems, according to a letter to the 
SEC chairwoman dated April 13. The GAO found the SEC had not consistently or fully 
implemented controls for identifying and authenticating users, authorizing access to 
resources, ensuring that sensitive data are encrypted or auditing actions taken on its 
systems. The SEC also had failed to install patch updates on its software, exposing it to 
known vulnerabilities, which could jeopardize data integrity and confidentiality, the 
auditors wrote. The SEC also did not configure servers supporting key financial 
applications to use encryption when transmitting data, resulting in increased risk that 
transmitted data can be intercepted, viewed, and modified. The GAO recommended the 
SEC create configuration baselines and related guidance to secure systems and monitor 
system configuration baseline implementation. Auditors also advised the agemcu to 
develop and implement a comprehensive vulnerability management strategy that 
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includes routine scanning of systems and evaluation of such scanning. 

Source: http://www.govinfosecuritv.com/secs-financial-information-at-risk-a-4679/op- 

I 

17. April 13, Bloomberg - (New York; Virginia; International) Ex-Synergy Brands chief 
charged in $26 million bank fraud. The former head of Synergy Brands Inc. was 
charged with a fraud that led to a $26 million loss for New York-based Signature Bank. 
Synergy’s former chief executive officer (CEO) was arrested April 13 and pleaded not 
guilty in federal court in Brooklyn, New York. The fraud arose from a check-kiting 
scheme meant to inflate Synergy’s sales, according to a statement from a U.S. attorney. 
He defrauded Signature and McLean, Virginia-based Capital One Financial Corp., 
according to the indictment. Synergy Brands filed a Chapter 7 liquidation petition in 
January 2011. The petition listed assets of $21.7 million and debt totaling $44.7 
million. The CEO kited about $750 million worth of checks not backed by sufficient 
funds through banks in the United States and Canada, according to the indictment. He 
had those checks deposited into accounts of associated food makers and distributors in 
Canada, which then sent checks in corresponding amounts back to Synergy in the 
United States, prosecutors said. Because the funds were immediately available, they 
artificially inflated Synergy’s bank balances. 

Source: http://www.businessweek.com/news/2012-04-13/ex-svnergy-brands-chief- 
charged-in-26-million-bank- fraud 

18. April 13, Associated Press - (Pennsylvania) Ex-CEO of Pa. medical billing firm 
guilty of fraud. The former chief executive of World Health Alternatives medical 
billing and staffing firm pleaded guilty to securities fraud and tax evasion in a scheme 
that cost shareholders about $41 million. Federal prosecutors initially claimed the 
scheme caused a $200 million loss to World Health Alternatives investors, but they 
agreed to the $41 million figure at his guilty plea April 13 to wire, securities, and 
records -keeping fraud, payroll and income tax evasion charges. The executive resigned 
just before the firm filed Chapter 1 1 in 2005. The charges claimed that he siphoned 
money from the company, manipulated records to hide $2.3 million in unpaid payroll 
taxes, and fudged records overstating loans he made to the company as well as financial 
statements used to fool auditors and shareholders. 

Source: http://www.businessweek.com/ap/2012-04/D9U472GG0.htm 

19. April 13, Infosecurity - (National) Watchdog finds ongoing information security 
gaps at Federal Reserve banks. The Government Accountability Office (GAO) has 
identified ongoing information security gaps at Federal Reserve Banks, Infosecurity 
reported April 13. During previous audits, GAO identified information security gaps 
affecting internal control over financial reporting at the Federal Reserve Banks, which 
maintain and operate financial systems on behalf of the Bureau of the Public Debt. 
While GAO’s audit for fiscal year 2011 did not identify any new security 
vulnerabilities, it found many existing gaps had not been fixed by the banks, although 
corrective actions are planned or in progress. “Additional actions are needed to fully 
address the open information systems control recommendations from our prior years’ 
audits,” GAO noted. “Until these information systems control deficiencies are fully 
addressed, there will be an increased risk that internal control deficiencies may exist 
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and remain unidentified and an increased risk of unauthorized access, loss, or 
disclosure; modification of sensitive data and programs; and disruption of critical 
operations,” the audit concluded. In response, the Director of the Reserve Bank 
Operations and Payment Systems said the banks “intend to implement corrective 
actions for one of the two remaining [gaps] by September 2012 as part of a transition to 
a new information security program, and complete actions to address the other [gap] in 
2013.” 

Source: http://www.infosecurity-magazine.com/view/25143/ 

20. April 13, Financial Advisor - (California) California advisor charged with stealing 
$7.5M. The U.S. Securities and Exchange Commission (SEC) has charged a financial 
advisor with stealing more than $7.5 million from 11 investors in a Ponzi scheme that 
targeted members of the Persian-Jewish community in Los Angeles. The SEC alleges 
the advisor in the past 2 years raised more than $7.5 million from investors who bought 
into his hedge fund, Neman Financial L.P. He claimed the fund invested in foreclosed 
residential properties that would be quickly flipped for profit as well as in Facebook 
shares and other highly anticipated initial public offerings, including Groupon, 
Linkedln, and Angie’s List. The SEC claims that essentially all the money he raised 
was used either to pay existing investors or fund his lavish lifestyle. A federal court in 
California granted the SEC’s request for a temporary restraining order and asset freeze 
against the advisor and the entities he controlled. 

Source: http://www.fa-mag.com/fa-news/10613-califomia-advisor-charged-with- 
stealing-over-75-million-in-ponzi-scheme.html 

21. April 13, Pasadena Star-News - (New York; National) Pasadena man admits role in 
insider trading scheme. A former research analyst at the Whittier Trust Co. pleaded 
guilty April 13 in a New York City federal court to his involvement in an insider 
trading scheme. He pleaded guilty to one count of conspiracy to commit securities 
fraud and two counts of securities fraud. The scheme included multiple analysts and 
portfolio managers at different hedge funds and investment firms and involved inside 
information about Dell, Inc. and NVIDIA Corporation. Using inside information about 
Dell, federal officials said the man helped his firm avoid $78,000 in losses, and the 
firms where his co-conspirators worked earned profits of more than $61.8 million. 
Authorities said he was part of a group of analysts at different investment firms and 
hedge funds who obtained inside information directly, or indirectly, from employees at 
publicly traded companies. The group shared the inside information with each other 
and also with their hedge fund portfolio managers. 

Source: http://www.pasadenastamews.com/ci 20392729/pasadena-man-admits-role- 
insider-trading-scheme 

For more stories, see items 26 and 27 
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Transportation Sector 



22. April 16, WXIA 11 Atlanta - (Georgia) 1-75 reopens after deadly wreck in Bartow 
Co. The Georgia State Patrol (GSP) is investigating an accident that shut down 
southbound lanes of Interstate 75 at mile marker 290 April 15 in Cartersville. The 
roadway did not reopen until shortly after midnight April 16, more than 9 hours after 
the crash. According to the GSP, a Ford F-35 pick-up truck traveling northbound 
crossed the median and hit a tractor-trailer heading southbound. The pick-up struck the 
left side fuel tank, igniting the fire. Both vehicles caught fire; the flames started a brush 
fire on the side of the interstate, GSP said. The driver of the pick-up truck was 
pronounced dead at the scene. The driver of the tractor-trailer was transported to a local 
hospital with burns over half of his body. 

Source: http://www.llalive.eom/news/article/238268/8/Accident-eloses-SB— 1-75- 
starts-brush-fire-in-Bartow-County 

23. April 15, White Plains Journal News - (New York) Westchester County Airport 
open after bomb scare forced evacuation; 2 flights diverted, hundreds of 
passengers delayed. A suspicious item in checked baggage tripped explosive sensors 
and caused a nearly 90-minute closure of Westchester County Airport in Harrison, New 
York, April 15, stranded hundreds of passengers and led to the diversion of two 
arriving flights. Earlier, the scare led to the closure of the terminal and delayed 13 
arriving and departing flights. Of those, four already on the tarmac were evacuated as 
they prepared to take off. Transportation Security Administration officials then 
summoned a bomb-sniffing dog stationed at the airport. The dog signaled the bag might 
contain explosives, and authorities closed the airport, evacuating about 350 people from 
the terminal. Westchester County’s hazardous-devices unit came to the airport and 
eventually determined the luggage contained no explosives. The bag belonged to a man 
traveling to Atlanta. There were no arrests or charges. 

Source: http://www.lohud.com/article/20120415/NEWS02/30415Q125/BREAKING- 
NEWS-Westchester-Countv-Airport-closed-over-securitv-threat?odyssev=navlhead 

24. April 15, Baton Rouge Advocate - (Louisiana) Official: Acid in tank 
neutralized. Emergency officials neutralized a potentially explosive reaction of liquid 
acrylic acid inside an overseas transport container parked at a hauling business on La. 

30 in Ascension Parish, Louisiana April 13, authorities said. The Ascension Parish 
director of homeland security and emergency preparedness said a liquid inhibitor was 
added to the cylindrical tank at Trimac Transportation Inc. in Geismar, cooling the 
reaction. On April 11, the acid began “polymerizing,” which means it began to form 
solid plastic on the edges of the tank. The incident shut neighboring business Airgas 
Inc. April 12 and led to the institution of a l-mile wide, 10,000-foot no-fly zone around 
Trimac. La. 30 remained open to traffic. Emergency officials monitored the tank and 
pumped water through coolant lines around the outside of the tank to stabilize the acid. 
The no-fly zone was lifted April 13. The tank, 18 feet long and 9 feet in diameter, holds 
about 40,000 gallons and was about three-fourths full of the acid. 

Source: http://theadvocate.com/news/police/2562773- 123/official-acid-in-tank- 
neutralized 
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For more stories, see items 2, 7, 10, and 63 



Postal and Shipping Sector 

25. April 16, KPAX 8 Missoula - (Montana) Teens cited in Missoula mailbox bomb 
incidents. Police in Missoula, Montana, report that a pair of male juveniles have been 
citied for their involvement in cases where homemade explosives which were put in 
several Missoula mailboxes the week of April 9. A Missoula Police sergeant said the 
case is now in the hands of city investigators. The incidents are believed to have 
happened April 11-12. 

Source: http://www.kpax.com/news/teens-cited-in-missoula-mailbox-bomb-incidents/ 

26. April 15, Detroit Observer & Eccentric - (Michigan) Pair charged in mail fraud 
case. A still- unfolding mail fraud investigation by Canton, Michigan police and the 
U.S. Postal Inspection Service already has led to criminal charges against two suspects 
arraigned April 13. Charges against the men came after a Canton resident notified 
police April 3 and reported a suspicious vehicle approaching mailboxes in the Cherry 
Hill-Beck Road area, a detective sergeant said. Police stopped the vehicle and started 
questioning the pair, who sped off and led authorities on a chase that ended in a 
shopping center parking lot. The men were arraigned on many charges, including 
stealing or retaining without consent a financial transaction device, larceny between 
$1,000 and $20,000, and forging a driver’s license with the intent to commit a crime. 
Source: http://www.hometownlife.com/article/20120415/NEWS03/204150399/Pair- 
charged-mail-fraud-case?odvssev=modlnewswellltext!Royal Oakls 

27. April 14, Park Rapids Enterprise - (National) Bogus e-mails sent in postal 

scam. Some postal customers are receiving bogus e-mails about a package delivery or 
online postage charges, the Park Rapids Enterprise reported April 14. The e-mails 
contain a link or attachment that, when opened, installs a malicious virus that can steal 
personal information from computers. The e-mails claim to be from the U.S. Postal 
Service and contain fraudulent information about an attempted or intercepted package 
delivery or online postage charges. Like most viruses sent by e-mail, clicking on the 
link or opening the attachment will activate a virus that can steal information — such as 
user name, password, and financial account information. The U.S. Postal Inspection 
Service is working to resolve the issue and shut down the malicious program. 

Source: http://www.parkrapidsenterprise.com/event/article/id/32257/ 



T Return to top i 

Agriculture and Food Sector 

28. April 15, Las Cruces Sun-News - (New Mexico) Feral hogs may reach Dona Ana 
County, official says. Feral hogs, which have spread from 2 New Mexico counties 7 
years ago to 17 today, are present along the Rio Grande in Sierra County and are likely 
on the way to Dona Ana County, said the New Mexico director for U.S. Department of 
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Agriculture Wildlife Services. They travel along the river because it is a source of 
water. Feral pigs have been spreading mostly in eastern New Mexico counties. But 
somehow, likely because humans transported them, they have reached the Rio Grande 
basin, he said. “Feral hogs are absolutely an environmental and ecological disaster. 
There will be a lot of property damage and probably some disease issues,” he said. The 
pigs can eat crops and sometimes young lambs, goats, and calves, and they root up 
fields. The state’s land office commissioner said he is trying to sound a warning alarm 
about the growing feral pig problem. 

Source: http://www.lcsun-news.com/las cruces-news/ci 20403970/feral-hogs-may- 
reach-do-241 -ana-county 



29. April 15, Pittsburgh Tribune -Review - (Pennsylvania) Fire blisters dairy supply 
warehouse north of Greensburg. Sparks from a bum barrel ignited a fire at a 
warehouse at Graham Dairy Supply in the Hempfield, Pennsylvania, April 14. The 
owner said he was burning trash in a barrel behind his warehouse when sparks flew and 
caused nearby plastic containers to catch fire. Within minutes, the fire spread to the 
large warehouse, he said. Firefighters from at least nine departments doused the blaze. 
The warehouse contained five antique tractors, plastic containers and products he sells 
to dairy farmers, such as cleaning supplies, iodine, wash cloths, and milk filters. Two 
white inflatable medic tents were set up for firefighters to rehydrate and to allow 
medics to check firefighters’ vital signs and later rinse any chemical residue from 
clothes and equipment, said the manager of Penn Township Ambulance. 

Source: 

http://www.pittsburghlive.eom/x/pittsburghtrib/news/westmoreland/s 791402.html 

30. April 14, U.S. Food and Drug Administration - (National) Dole Fresh Vegetables 
announces precuationary recall of limited number of salads. Dole Fresh Vegetables 
is voluntarily recalling 756 cases of Dole Seven Lettuces salad with use-by date of 
April 11, 2012, UPC code 71430 01057 and Product Codes 0577N089112A and 
0577N0891 12B, due to a possible health risk from salmonella. Dole Fresh Vegetables 
is coordinating closely with regulatory officials, the U.S. Food and Drug 
Administration said April 14. No illnesses have been reported. The salads were 
distributed in 15 U.S. States: Alabama, Florida, Illinois, Indiana, Maryland, 
Massachusetts, Michigan, Mississippi, New York, North Carolina, Ohio, Pennsylvania, 
Tennessee, Virginia, and Wisconsin. This notification was issued due to an isolated 
instance in which a sample of Seven Lettuces salad yielded a positive result for 
salmonella in a random sample test collected and conducted by the State of New York. 
Source: http://www.fda.gov/Safety/Recalls/ucm300414.htm 

31. April 14, Associated Press - (Oregon) E. coli in 4 children traced to raw milk. Lab 
tests confirmed that four children under the age of 15 have contracted E. coli linked to 
raw milk from a small Oregon farm, state health officials said April 13. Three of the 
Oregon children were hospitalized, two of them with kidney failure, and Foundation 
Farm near Wilsonville has voluntarily stopped distributing milk. Health officials said 

1 1 other customers of the dairy reported recent diarrhea and other symptoms typical of 
E. coli. State officials said Foundation Farm distributed to 48 households that were part 
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of a “herd share” — an arrangement in which people own a portion of a herd of cows. 
Source: http : //w w w .bendbulletin . com/article/20 12041 4/NEW S 0 1 07/204 1 403 67/ 



32. April 13, U.S. Food and Drug Administration - (National) Moon Marine USA 
Corporation voluntarily recalls frozen raw yellowfin tuna product. Moon Marine 
USA Corporation of Cupertino, California, is voluntarily recalling 58,828 lbs of a 
frozen raw yellowfin tuna product, labeled as Nakaochi Scrape A A or AAA. Nakaochi 
Scrape is tuna backmeat, which is specifically scraped off from the bones, and looks 
like a ground product. The Nakaochi Scrape is associated with an outbreak of 1 16 cases 
of salmonella bareilly in multiple states: Alabama (2), Arkansas (1), Connecticut (5), 
District of Columbia (2), Florida (1), Georgia (5), Illinois (10), Louisiana (2), Maryland 
(11), Massachusetts (8), Mississippi (1), Missouri (2), New Jersey (7), New York (24), 
North Carolina (2), Pennsylvania (5), Rhode Island (5), South Carolina (3), Texas (3), 
Virginia (5), and Wisconsin (12). The product is not available for sale to individual 
consumers, but may have been used to make sushi, sashimi, ceviche and similar dishes 
available in restaurants and grocery stores. The product may have passed through 
several distributors before reaching the restaurant and grocery market, and may not be 
marked with lot information. 

Source: http://www.fda.gov/Safety/Recalls/ucm300412.htm 

33. April 13, newsplex.com - (Virginia) Carbon dioxide leak at Lovingston 
McDonald’s. A carbon dioxide leak caused an evacuation April 13 at the McDonald’s 
in Lovingston in Nelson County, Virginia. One of the canisters used to make 
carbonated drinks had a malfunction, leaking carbon dioxide into the air. Several 
employees said they felt sick after coming into contact with the gas. Crews from the 
Lovingston Fire Department checked the gas meter and determined that no lethal doses 
of carbon dioxide were in the air. “It just put a lot of C02 into the building,” said the 
fire official. “We shut the building to air it out, then we let everybody go back to 
work.” The employees who complained of nausea were examined on site by rescue 
crews. 

Source: 

http://www.newsplex.com/home/headlines/Carbon Dioxide Leak at Lovingston Me 
Donalds_ 147341855. html 



For more stories, see items 5, 7, 57, 59, 63, and 65 



T Return to top i 



Water Sector 



34. April 16, Legal Newsline - (Pennsylvania) Pa. company to pay $75K penalty to 
EPA. The U.S. Environmental Protection Agency (EPA) announced April 12 that ST 
Products of Duncansville, Pennsylvania, will pay a $75,000 penalty for allegedly 
exceeding permit limits. The EPA’s complaint alleged the company exceeded its 
pretreatment permit discharge limits for oil, grease, zinc, lead, and copper during a 34- 
month period. The industrial wastewater pollutants went to the wastewater treatment 
plant operated by the Borough of Hollidaysburg (BOH) in Frankston Township in Blair 
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County. The BOH wastewater treatment plant discharges treated wastewater to the 
Juniata River that flows into the Susquehanna River and ultimately the Chesapeake 
Bay. ST Products did not admit liability for the alleged violations, but has certified it is 
now in compliance with Clean Water Act requirements. 

Source: http://www.legalnewsline.com/news/235835-pa.-companv-to-pav-75k-penaltv- 
to-epa 

35. April 13, Associated Press - (Texas) Water line breaks force town of Kemp to issue 
another boil drinking water advisory. Multiple water pipe leaks lead to a boil-water 
advisory for Kemp, Texas, April 13. Officials said both distribution lines failed April 

1 1 and though they were repaired April 13, water was not safe for drinking. Testing 
results were not expected until April 17. Bottled water was available at Kemp City 
Hall. Kemp lost water for a few days in August 2011 because of problems with the 
same antiquated pipes. Government funds were being sought to help pay the estimated 
$2.5 million cost to replace the current system. 

Source: 

http://www.therepublic.com/view/story/74bac4a9690c4fbf971087b5333b8ba4/TX— 

Kemp-Boil-Water/ 

36. April 13, Wilmington Star-News - (North Carolina) Authority fined $8,500 for 
January sewage spill. The North Carolina Division of Water Quality fined the Cape 
Fear Public Utility Authority April 12 more than $8,000 for a January sewage spill 
where 1.4 million gallons of waste spewed into Barnards Creek. The $8,530.55 penalty 
was based on many factors, including the amount of sewage spilled and the authority’s 
overall response to the incident. According to the citation, other factors includes “the 
degree and extent of harm to the natural resources of the State, the effect on ground or 
surface water quantity or quality or on air quality,” and “the cost of rectifying the 
damage.” 

Source: 

http://www.stamewsonline.com/article/20120413/ARTICLES/120419863?p=l&tc=pg 
For another story, see item 4 
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37. April 16, Associated Press - (National) Report: Nursing homes unprepared for 
natural disasters. Tornado, hurricane, or flood, nursing homes are woefully 
unprepared to protect frail residents in a natural disaster, government investigators say. 
The investigators from the inspector general’s office of the Department of Health and 
Human Services noted that nearly 7 years after Hurricane Katrina’s devastation of New 
Orleans exposed the vulnerability of nursing homes, shortcomings persist. “We 
identified many of the same gaps in nursing home preparedness and response,” they 
wrote in the report released April 16. “Emergency plans lacked relevant information . . . 
Nursing homes faced challenges with unreliable transportation contracts, lack of 
collaboration with local emergency management, and residents who developed health 
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problems.” Emergency plans required by the government often lack specific steps such 
as coordinating with local authorities, notifying relatives, or even pinning name tags 
and medication lists to residents during an evacuation, according to the findings. The 
report recommended that Medicare and Medicaid add specific emergency planning and 
training steps to the existing federal requirement that nursing homes have a disaster 
plan. Many such steps are in nonbinding federal guidelines that investigators found 
were disregarded. 

Source: http://www.washingtonpost.com/politics/report-nursing-homes-unprepared-for- 
natural-disasters/2012/04/15/gIQAhTP7KT story.html 

38. April 16, Nebraska Radio Network - (Nebraska) At least 5 tornadoes rake Nebraska, 
Norfolk hospital damaged. The National Weather Service confirmed three twisters 
touched down April 14 in Harlan County, Nuckolls County, and Thayer County, 
Nebraska. At least two other tornadoes were not confirmed near Cook and North Platte. 
There was significant hail and water damage at the Faith Regional Health Services 
hospital in Norfolk. The emergency department was flooded with at least 4 feet of 
water that filled the hallways and treatment rooms. When the water receded, large 
chunks of ice from hail were left behind. Hospital staff members were able to shuffle 
patients to other areas of the hospital. Damage at the hospital was being assessed. 
Source: http://nebraskaradionetwork.com/2012/Q4/16/at-least-5-tomadoes-rake- 
nebraska-norfork-hospital-damaged/ 

39. April 14, Des Moines Register - (Iowa) 200 search damaged Creston buildings after 
tornado, storms. Nearly 200 emergency workers were sorting through the damage at 
Greater Regional Medical Center and Southwestern Community College in Creston, 
Iowa, April 14 after the hospital sustained “significant damage” when a reported 
tornado hit the community, the Creston police chief said. There were reports of injuries, 
but no fatalities. Patients at the hospital were transported to Clarke County Hospital in 
Osceola, about 25 miles away. The emergency workers combed through wreckage in 
search of any missing people throughout the night. Firefighters switched to a 12-hour 
rotation to keep up relief efforts through the night. Rescue workers planned to do a 
second building-by-building search at the hospital, college, and other buildings, 
physically marking buildings they have checked. 

Source: 

http://www.desmoinesregister.com/article/20 1 204 1 4/NEW S/1 204 1 4004/T omado- 

reported-south-of-Greenfield-Macksburg-residents-seek- 

shelter?odyssey=tabltopnewsltextlNews 

40. April 14, WSPA 7 Spartanburg - (South Carolina) Sheriff: Man brought pipe bomb 
into upstate hospital. A pipe bomb was discovered at Wallace Thomson Hospital in 
Union, South Carolina, April 13. The Union County Sheriff’s Office said a man had 
checked himself into the hospital April 1 1 for self-medicating, and nurses became 
suspicious of him after he became combative when personnel approached him. An on- 
call deputy from the Union County Sheriff’s Office searched his room and a pipe bomb 
was found in a bag. Authorities from Union County, Spartanburg County, and the state 
law enforcement division responded. The explosive was safely removed from the 
hospital and no other explosives were found on the property. The hospital was not 
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evacuated. 

Source: http://www2.wspa.com/news/2012/apr/13/10/pipe-bombs-reported-found- 
union-county-home-ar-3599392/ 

For another story, see item 47 
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41. April 16, Pittsburgh Tribune -Review - (Pennsylvania) Pitt starts week with new 
round of bomb threats. The University of Pittsburgh in Pittsburgh received a bomb 
threat April 16 for the Barco Law School Building and Holland and Lothrop Halls, 
according to an Emergency Notification System (ENS) alert sent from the university’s 
Twitter account. The alert asked people in the buildings to evacuate. Authorities 
cleared the Barco building and restricted access to it to one entrance, the ENS said. 
Authorities cleared Holland and Lothrop shortly afterwards. The school has received 
more than 90 bomb threats since February 13. 

Source: http://www.pittsburghlive.eom/x/pittsburghtrib/news/breaking/s 791522.html 

42. April 16, Softpedia - (Arkansas) Team GhostShell hacks University of Arkansas 
computer store. Members of Team GhostShell gained unauthorized access to the 
official computer store of the University of Arkansas, uarkcomstore.com, Softpedia 
reported April 16. The breach was a form of protest against the recent law enforcement 
operations that targeted hackers. The hackers have dumped tens of thousands of 
records, comprised of names, addresses, phone numbers, departments, zip codes, and 
local codes. However, they revealed that they possess around 100,000 accounts from 
the targeted site’s databases. “There’s something we should probably mention though, 
this place has been breached more than once,” the hackers explained. “So you could 
say that we’ve helped you this time, by revealing your vulnerability and exposing the 
fact that your databases have been spoofed and that you should most likely look into it 
before it’s too late.” 

Source: http://news.softpedia.com/news/Team-GhostShell-Hacks-University-of- 
Arkansas-Computer-Store-264675.shtml 

43. April 15, KNXV 15 Phoenix - (Arizona) Gunman fires shots inside Luke AFB. A 
gunman fired shots April 15 inside Luke Air Force Base near Glendale, Arizona after 
what police believe was a “domestic disturbance”. A lieutenant said a man inside the 
base fired his gun near the housing units for service members. He said the man escaped 
the base by crashing his vehicle through a steel gate. Witnesses said it looked like the 
man hit the gate, then backed up and hit it again to escape. The lieutenant said the 
shooting was not terrorist related. Luke Air Force Base officials were working with the 
Glendale and Avondale police departments on the investigation. 

Source: http://www.abcl5.com/dpp/news/region west valley/litchfield park/security- 
being-increased-at-luke-air- force-base-following-disturbance 
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44. April 13, WTNH 8 New Haven - (Connecticut) Security breach, 87,000 exposed. A 
security breach into the hard-drive at Housatonic Community College in Bridgeport, 
Connecticut has affected nearly 87,000 people. College officials said they are taking 
action to make sure the students, faculty, and anyone on file stays safe. The breach does 
not just impact students who currently attend the college, it affects anyone who has a 
file on record in the hard drive. The date of birth and Social Security numbers of tens of 
thousands of people were exposed. Law enforcement is now involved. The school said 
even before the breach, the school dealt with on-line security on a daily basis. “For 
every individual whose record is there, we are providing two years of security 
insurance, security theft identification, if anything were to occur. Typically if there was 
to be a malicious attack, it’s done within the two-year period,” said the college 
president. 

Source: http://www.wtnh.com/dpp/news/fairfield cty/security-breach-affects-thousands 

45. April 11, myCentralJersey.com - (New Jersey) Another bomb threat at Union 
County College. Cranford, Union County, and Union County College police in New 
Jersey investigated a bomb threat April 11 at the Cranford campus. County sheriffs K- 
9 units also responded. The Cranford campus was shut down and all students and 
faculty were ordered to evacuate. Police said the school reopened that afternoon. The 
week of April 2, police investigated but found nothing after a bomb threat was called 
into the admissions office of the Cranford campus. That threat referenced all of the 
campuses, located in Cranford, Plainfield, Elizabeth, and Scotch Plains, but nothing 
exploded. 

Source: 

http://www.mvcentraliersev.com/article/2012041 l/NJNEWS/3041 10022/ Another- 
bomb-threat-Union-County-College?odyssey=navlhead 

For more stories, see items 11, 39, and 58 
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46. April 16, Associated Press - (Oklahoma; Kansas; Iowa) Experts: Don’t rely just on 
tornado warning sirens. When a tornado dropped quickly from the sky above 
Woodward, Oklahoma, April 15, the town’s 20 outdoor tornado sirens were 
nonfunctional due to a lightning strike on the tower used to activate the warning 
system. The Woodward tornado proved fatal after it hit without warning. While it is 
unknown whether the disabled sirens contributed to the toll in Woodward, residents and 
officials in hard-hit areas of Kansas, Iowa, and elsewhere credited days of urgent 
warnings from forecasters for saving lives. Many residents have grown up counting on 
tornado sirens to warn them when a twister has been spotted on the ground, but 
emergency officials say that can be one of the least reliable methods, especially when a 
tornado hits at night. Emergency management officials urged residents to take 
advantage of weather radios, smartphones, and television warnings to keep them up to 
speed when weather turns dangerous. Sirens are not designed to wake residents who are 
sleeping or to penetrate the thick insulation in modern homes, the director of the 
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Oklahoma Office of Emergency Management said. 

Source: http://www.cbsnews.com/8301-201 162-57414503/experts-dont-rely-iust-on- 
tomado-warning-sirens/ 

47. April 15, Associated Press - (Iowa) Iowa police chief says tornado sirens didn’t 
sound. The Creston, Iowa police chief said tornado sirens did not sound before a strong 
storm swept into town April 14, damaging a hospital and community college. He said 
there was no warning before an apparent tornado hit, and the first notification he 
received came from a call from Greater Regional Medical Center; the hospital 
sustained roof damage and had its windows blown out by the storm. He said Creston 
was “very lucky” that no one was injured. 

Source: http://www.ksfv.com/storv/17456294/iowa-police-chief-savs-tornado-sirens- 
didnt-sound 



48. April 15, Louisville Courier-Journal - (Kentucky) Cells inside cells: Kentucky 
inmates gaining access to more cellphones. An inmate made and received dozens of 
cellphone calls from inside Metro Corrections in Louisville, Kentucky, during the 
201 1 -summer as he awaited his murder trial, allegedly telling a person on the other end 
to kill everybody who was going to testify against him, even children, the Louisville 
Courier-Journal reported April 15. The cellphone was smuggled to him by a jail 
employee, according to an internal investigation. Although cellphones are illegal for 
inmates to possess, the devices are being found in their hands at alarming rates across 
the country, with this case a prime example of the potential dangers. National officials 
say inmates are getting more ingenious: Cellphones have been put inside the soles of 
shoes, thrown over prison walls or launched through a pipe from a device called a 
potato cannon where inmates can pick them up during exercise periods. In Kentucky, 
the number of cellphones confiscated from prison inmates climbed to more than 80 in 
2011 from only 7 in 2006. The problem has led officials in Kentucky and many other 
states to try and get phone signals jammed inside prisons, though that movement has 
repeatedly stalled. 

Source: http://www.courier-journal.com/article/20120415/NEWS01/304160029/Cells- 
inside-cells-Kentuckv-inmates-gaining-access-more-cellphones?odyssev=navlhead 

Lor more stories, see items 6, 37, 57, 
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49. April 16, PC World - (International) Two more Mac trojans discovered. Lollowing 
the outbreak of the Llashback Mac trojan, security researchers spotted two more cases 
of Mac OS X malware. Both cases are variants on the same trojan, called SabPub, said 
a Kaspersky Lab researcher. The first variant is known as Backdoor.OSX. SabPub. a. 
Like Llashback, this new threat was likely spread through Java exploits on Web sites, 
and allows for remote control of affected systems. It was created roughly 1 month ago. 
However, the malware is not a threat to most users. It may have only been used in 
targeted attacks, the researcher said, with links to malicious Web sites sent via e-mail, 
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and the domain used to fetch instructions for infected Macs has since been shut down. 
Furthermore, Apple’s security update for Flashback helps render future Java-based 
attacks harmless. In addition to removing the Flashback malware, the update 
automatically deactivates the Java browser plug-in and Java Web Start if they remain 
unused for 35 days. Users must then manually re-enable Java when they encounter 
applets on a Web page or a Web Start application. Instead of attacking through 
malicious Web sites, the second SabPub variant uses infected Microsoft Word 
documents as vector, distributed by e-mail. Like the other SabPub variant, this one was 
used only in targeted attacks. 

Source: 

http://www.computerworld.eom/s/article/9226234/Two More Mac Trojans Discover 
ed 

50. April 16, Softpedia - (International) Malicious ‘the Movie’ apps served on Google 
Play. A number of 29 Android applications found on Google Play (the new Android 
Market) were identified as being malicious by Symantec. The pieces of malware, 
identified as Android. Dougalek, pretend to be popular games or games-related videos. 
First discovered in February, the elements were advertised as recipe apps, diet assistant 
apps, content management apps, and adult apps. At the end of March, the same 
cybercriminals were believed to have launched another series of malicious programs, 
the names of which all end in “the Movie.” Experts reveal that at least 70,000 users 
may have installed the pieces of software, but the true number of victims may be as 
high as 300,000. Initial analysis of the malevolent applications showed they mainly 
target Japanese Android users. Also, it is likely those who started the campaign are the 
same cybercriminals that spread the malware known as Android. Oneclickfraud. Once 
installed, the apps request the rights to access personal data and the phone’s identity. 
While in the foreground it seems as they connect to an external server from which they 
download the promised videos, but in reality they gather information and send it back 
to the server. Once the malicious apps are installed, they will appear on the Android 
device under a different name than the one presented on Google Play. Currently, 

Google removed the applications from the Play site. 

Source: http://news.softpedia.com/news/Malicious-The-Movie-Apps-Served-on- 
Google-Play-264672.shtml 

51. April 16, The H - (International) Oracle accidentally release MySQL DoS proof of 
concept. Oracle accidentally released a MySQL denial-of-service (DoS) proof of 
concept in the process of fixing the same problem. In March, the company released 
updates to MySQL, versions 5.5.22 and 5.1.62, which referred in their changes to 
“Security Lix: Bug #13510739 and Bug #63775 were fixed” with no other details on 
the problems. It is a common practice to keep secret details of issues that could be used 
against older versions of software; even the bug reports for 13510739 and 63775 were 
not yet publicly available. However, as a security researcher found, Oracle also shipped 
the new MySQL versions with a development script “mysql- 

test/suite/innodb/t/innodb_bugl35 10739. test” in the source that appeared to be not only 
part of the automated testing for MySQL, but also a proof of concept for the flaw that 
crashes MySQL 5.5.21 and earlier versions. The researcher posted the script on 
Pastebin; it requires authenticated access and appropriate privileges to be run, which 
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mitigates the problem to a certain degree. 

Source: http://www.h-online.com/security/news/item/Oracle-accidentally-release- 
MySQL-DoS-proof-of-concept- 15261 46.html 

52. April 14, Softpedia - (International) Researchers reveal flaws in Microsoft Partner 
Network Cloud Service. Experts from Vulnerability Lab have been helping Microsoft 
patch serious vulnerabilities that affected some services. The most important security 
hole was a persistent script code inject vulnerability found in Microsoft Partner 
Network Cloud service. To demonstrate their findings, the researchers made a video 
proof-of-concept that showed how easily an attacker can leverage the persistent script 
code injection flaws on a Microsoft Cloud aspx service to execute their own malicious 
code. Microsoft was notified regarding the presence of medium severity flaws in the 
Company & Mobile Phone Number (Profile) and the Company Name Profile Listing 
modules Lebruary 11. After collaborating with the Microsoft Security Response Center 
team and after ensuring the issues were addressed, Vulnerability Lab made available 
the video and a proof-of-concept in text format. 

Source: http://news.softpedia.com/news/Researchers-Reveal-Llaws-in-Microsoft- 
Partner-Network-Cloud-Service-264644.shtml 



53. April 13, SecurityWeek - (International) Ransomware infects master boot record, 
Trend Micro finds. Researchers at Trend Micro uncovered a piece of ransomware 
targeting the master boot record (MBR) to take control of a system. The move is a step 
beyond typical pieces of ransomware, which usually encrypt files or restricts user 
access to the infected system. In this case, however, the malware copies the original 
MBR and overwrites it with its own malicious code. “Right after performing this 
routine, it automatically restarts the system for the infection to take effect,” a threat 
response engineer at Trend Micro said. When the system restarts, the users are greeted 
with a message telling them their PC is now blocked and that they should pay 920 
hryvnia (UAH) via the QIWI payment service to a purse number. Once that is done, the 
attacker promises to hand over a code to unlock the system, the researcher added. 
Source: http://www.securityweek.com/ransomware-infects-master-boot-record-trend- 
micro-finds 



Lor more stories, see items 16, 19, 21, 27, 42, 44, and 55 

Internet Alert Dashboard 

To report cyber infrastructure incidents or to request information, please contact US-CERT at sos@us-cert.gov or 
visit their Web site: http://www.us-cert. gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: https://www.it-isac.orii 
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Communications Sector 



54. April 16, Pittsburgh Post-Gazette - (Pennsylvania) Power outage knocks local radio 
stations off air. A power outage in Green Tree, Pennsylvania, caused intermittent 
broadcasts for a number of CBS local stations the morning of April 16, including 
KDKA 93.7 FM Pittsburgh. The vice president and CBS Pittsburgh market manager 
said an electrical panel blew out at the station’s facility in Green Tree. The panel 
included the circuitry that prompts an automatic switch to generator power. Until the 
power link could be accessed manually, broadcasts on KDKA, WBZZ 100.7 FM New 
Kensington, and WDSY 107.9 FM Pittsburgh were mostly off the air. The event was 
resolved in about 2 hours. KDKA 1020 AM Pittsburgh was not affected. 

Source: http://old.post-gazette.com/pg/12107/1224644-67.stm 

55. April 15, PC World - (National) Google hit with $25K fine, but FCC finds street 
view data collection not illegal. Google was issued a $25,000 fine by the Federal 
Communications Commission (FCC) for impeding the agency’s investigation of some 
of the Internet search leader’s data-gathering practices, PC World reported April 15. At 
issue is the finding nearly 2 years ago that Google Street View cars were collecting 
payload data from unprotected Wi-Fi networks via code written for an experimental 
project. Now, the FCC, which is looking into what happened with the data and why it 
was gathered, ordered Google to open its checkbook because the company 
“deliberately impeded and delayed” its investigation, the New York Times reported. 
Google said it was “profoundly sorry for having mistakenly collected payload data — 
including personal information such as passwords and emails — from unencrypted 
networks.” The FCC was initially satisfied with that response, but it said over time 
Google has repeatedly not responded to requests for information, took the position that 
searching employees’ e-mails would be burdensome, and would not name the 
employees involved. Even so, the FCC decided Google’s data collection was not illegal 
because the information the company gleaned was not encrypted. 

Source: 

http://www.cio.com/article/704305/Google Hit with 25K Fine but FCC Finds Stre 
et View Data Collection Not Illegal?taxonomyId=3234 

For more stories, see items 50 and 52 
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Commercial Facilities Sector 



56. April 16, CNN - (Oklahoma; Iowa) Oklahoma tornado claims sixth 

victim. Tornadoes and storms that killed 6 people in Oklahoma also destroyed 13 
businesses in Woodward, April 15. The storm also took out the transmitter for the 
tornado warning siren system. The Oklahoma governor declared a state of disaster 
emergency in 12 counties in order to help expedite resources. Four truckers whose rigs 
were blown off Interstate 29 by a tornado that struck Thurman were hospitalized with 
storm-related injuries, the National Weather Service said. Additionally, a tornado 
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struck a hospital in Creston, Iowa, blowing out windows and damaging the roof. There 
were no major injuries reported, and patients were relocated to other area hospitals. 
Source: http ://www .cnn.com/20 1 2/04/ 1 6/us/midwest- storms/index .html 

57. April 16, DNAinfo.com - (New York) Anarchists attack NYPD, Starbucks in East 
Village: police. Two police officers were injured April 14 when police clashed with a 
throng of anarchists, who attacked them with metal pipes and wreaked havoc at a New 
York City Starbucks in Manhattan during a wild, hours-long spree, police said. Earlier, 
members of the group, some wearing masks, had attended an anarchist book fair at 
Judson Memorial Church and then took to the streets around Washington Square Park, 
marching against traffic and shouting anti-police slogans. According to police, some 
members of the group of 150 tipped over garbage cans and spray-painted anarchist 
symbols on nearby businesses. 

Source: http://www.huffingtonpost.com/201 2/04/1 6/anarchists-attack-nypd-starbucks- 
east- village n 1428018.html 

58. April 15, Associated Press - (Kansas) Kansas hit by more than month’s worth of 
tornadoes. The massive storm system that moved through Kansas the weekend of 
April 14 damaged businesses, uprooted trees, caused power outages, and upended 
about 100 homes in a Wichita mobile home park. The storms hit the Kansas counties of 
Sedgwick and Rice especially hard. The Pinaire Mobile Home Park in southeast 
Wichita sustained major damage, but there were no major injuries. Several of the 
mobile homes were demolished, others were heavily damaged. A reported tornado also 
damaged McConnell Air Force Base in Wichita. Officials relocated 16 KC-135 
Stratotankers to Grand Forks Air Force Base as a precaution. There were no reports of 
injured service members or aircraft damaged, but the 184th Intelligence Wing of the 
Kansas Air National Guard building sustained some damage. Storm damage was also 
reported at the nearby Kansas Aviation Museum. Six buildings at Spirit AeroSystems 
were significantly damaged and four others had major damage. Both the Hawker- 
Beechcraft plant and a Wichita elementary school sustained roof damage. 

Source: http://www.stltoday.com/news/state-and-regional/missouri/kansas-hit-by-more- 
than-month-s-worth-of-tornadoes/article 17fa755b-9490-5eae-a427- 
b9ba7c7bba28.html 

59. April 14, WESH 2 Orlando - (Florida) Car crashes into Publix store, injures 10. At 
least 10 people were injured when a car crashed into a Publix store in Palm Coast, 
Florida, April 14. Investigators said a 74- year-old woman drove through the sliding- 
glass doors of the supermarket and about 125 feet into the store, hitting several people. 
One man was found underneath the vehicle and was transported by helicopter to a 
hospital in critical condition. Other victims suffered minor injuries. The store was 
expected to reopen April 15. 

Source: http://www.wesh.com/hometest/30893298/detail.html 

60. April 13, Santa Monica Patch - (California) Downtown blaze: Red Cross shelters 53 
tenants. More than 50 tenants of a Santa Monica, California apartment building that 
caught fire April 13 were being sheltered by the Red Cross during the weekend of April 
14. The city yellow-tagged the building because of electrical issues and other safety 
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concerns, limiting access for emergencies only. The fire in the 53-unit building was 
contained to 1 unit, but smoke spread to the second and possibly third floors. The cause 
of the fire was under investigation, but some residents said they heard popping sounds 
before it broke out, possibly from exploding oxygen tanks. 

Source: http://santamonica.patch.com/articles/downtown-fire-hits-2nd-street 

61. April 13, WBNS 10 Columbus - (Ohio) Gas line struck at Easton; several stores 
evacuated. A gas leak at the Easton Town Center shopping center in Columbus, Ohio, 
prompted an evacuation April 13. A construction crew struck a gas line near a 
department store while digging a trench for a new parking garage. According to a 
spokeswoman for the shopping center, the east parking garage and buildings 5 and 6 
were also evacuated. Customers and employees were allowed to return to the stores 
after about 4 hours. 

Source: http : //www. 1 Otv . com/content/stories/20 1 2/04/ 1 3/easton-gas-leak- 
evacuation.html 



For more stories, see items 24, 63 , 
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National Monuments and Icons Sector 

Nothing to report 
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Dams Sector 



62. April 15, Associated Press - (South Dakota; Nebraska; Iowa) Corps reducing releases 
at Gavins Point Dam into Missouri River after heavy rain in Neb., Iowa. The U S. 
Army Corps of Engineers reduced releases from Gavins Point Dam near Yankton, 
South Dakota, from 28,000 cubic feet per second (cfs) to 22,000 cfs April 16 after a 
weekend of heavy rains. Similar reductions were under way at other upstream 
reservoirs. The chief of the Corps’ Missouri River Basin Water Management Division 
said reductions were needed to prevent flooding along the Missouri River in eastern 
Nebraska and western Iowa. The river was expected to temporarily fall below the 
navigation target of 31,000 cfs in Sioux City. 

Source: 

http://www.therepublic.com/view/storv/b8d6df31ce7a47d3bafl74509bbbla6a/NE— 

Severe-Weather-Missouri-River/ 



63. April 15, Associated Press - (National) More flood storage has limited benefit to 
Missouri River. More flood storage space in the Missouri River’s reservoirs would 
have reduced, but not prevented, the devastating floods of 2011, the U.S. Army Corps 
of Engineers said in a report released April 13. The Corps said there still would have 
been widespread flooding damage in 201 1 because of the massive volume of water that 
moved through the river. It also noted that any increase in the amount of flood storage 
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space in the reservoirs would reduce the economic benefits the river offers through 
barge traffic, recreation, and hydropower. Reducing flood risk along the Missouri River 
over the long run might require changing the way communities and states think about 
development in the flood plain and widening the levee system to allow for more room 
in the channel, the commander of the Corps’ Northwestern Division said. In 2011, 
flooding caused at least $630 million of damage to flood control structures along the 
2,341 -mile-long river. Hundreds of thousands of acres of farmland also were damaged 
along the river, which flows from Montana through North Dakota, South Dakota, 
Nebraska, Kansas, Iowa, and Missouri. The latest report is part of the analysis being 
done to determine whether the Corps needs to increase the 16.3 million acre- feet of 
space that is normally cleared out each spring for flood-control purposes. 

Source: http://www.kansascitv.com/2012/04/13/3555630/more-flood-storage-in- 
reservoirs.html 



64. April 15, Norwich Bulletin - (Connecticut) Repair work starts on Griswold, 
Voluntown flood-damaged dams. Repair work began on the Ashland, Glasgo, and 
Pachaug dams in Griswold, Connecticut and the Beachdale dam in Voluntown through 
the Federal Emergency Management Administration (FEMA), the Norwich Bulletin 
reported April 15. The dams were damaged in the March 2010 floods. According to the 
2010 FEMA report on the storm damage, floods caused $11.57 million in damage to 
public structures statewide, mostly roads and bridges. The damage in New London 
County equates to $27 per county resident. 

Source: http://www.norwichbulletin.com/newsnow/xl221870967/Repair-work-starts- 
on-Griswold-Voluntown-flood-damaged-dams#axzzlsCuXrH5F 

65. April 14, Associated Press - (Washington; Nevada; Arizona) Lake Mead tests anti- 
mussels plan. Researchers in the Pacific Northwest plan to test whether a chemical 
coating they hope prevents invasive mussels from clogging dams will work on Lake 
Mead at the Arizona-Nevada border, the Associated Press reported April 14. Invasive 
zebra and quagga mussels are not in the Pacific Northwest yet, but hydropower 
managers on the Columbia River fear that if they reach the area, they will spread 
uncontrollably, filling dam pipes and crowding out other wildlife. The Columbian of 
Vancouver, Washington, reported that later in 2012, researchers at a Washington state 
port will bring panels coated with a chemical solution to Lake Mead to see how the 
mussels themselves react to the coating. The researchers hope the force of water current 
alone will be enough to dislodge them. 

Source: http://www.myfoxphoenix.com/dpp/news/local/flagstaff/apx-RInvasive- 
Mussels 08668911-04142012 
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